$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19eacc53-e4f8-3baf-b3b6-8566cab25b67.roa File: 19eacc53-e4f8-3baf-b3b6-8566cab25b67.roa (raw, json) Hash identifier: rg2fspXlfrkDMTl2ppRFazYNSI+rtRgQXiYzlASILXI= Subject key identifier: 13:79:33:00:06:68:C9:D6:DD:14:93:7B:9A:7F:E4:26:B2:B7:FF:1F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491D717671F37A9DFBE2523900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19eacc53-e4f8-3baf-b3b6-8566cab25b67.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:76:71:f3:7a:9d:fb:e2:52:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=75de3550-9f32-42a3-9127-a06376d345cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:31:b2:ed:4d:9b:d2:a2:04:50:6d:a0:d4: 23:5d:cd:44:64:ca:0d:3a:33:ca:a0:a1:56:b0:c0: 74:41:7f:2c:f0:ad:fa:7e:b3:1f:05:35:64:91:aa: ab:93:16:75:0d:fc:85:da:5d:25:d5:8d:e4:ce:9e: 39:a1:5e:c6:15:a7:a4:6f:8b:9a:17:b3:ac:fa:fc: 2a:98:67:33:df:25:ce:a6:a4:93:2a:91:3d:85:d2: 5f:ab:f2:50:e9:60:a0:15:bc:d7:70:c5:80:44:20: 25:a0:8c:74:44:96:1d:2d:f4:b0:5a:e3:cb:95:5c: 82:d3:f4:ce:bb:a9:d4:b7:4b:37:94:79:3b:e5:08: cf:3c:99:91:01:4d:73:35:f0:e7:77:f4:95:66:59: 25:5d:10:a1:05:29:66:67:39:90:94:be:19:74:54: bc:79:ed:13:95:9e:d5:c7:9b:01:a2:e7:ce:08:d7: c4:9c:41:7c:98:27:f6:58:b8:21:77:f8:4b:b4:6c: 10:2a:45:e3:3b:d5:eb:1a:96:d1:7f:d8:ac:cc:2b: d3:d2:88:66:96:11:04:f0:b7:9f:04:20:63:97:77: 6a:50:29:cb:35:c3:a7:1a:96:62:ee:dc:55:52:d9: d4:ff:0c:f2:60:d5:73:37:b6:c7:18:35:36:f1:a2: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:79:33:00:06:68:C9:D6:DD:14:93:7B:9A:7F:E4:26:B2:B7:FF:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/19eacc53-e4f8-3baf-b3b6-8566cab25b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ca:97:5e:d1:23:90:38:7e:7c:42:a1:ac:20:d5:89:1f:4e: 40:17:82:ab:d6:82:99:f1:2b:8f:e6:ea:e0:3c:f3:8f:d4:73: a9:c4:47:41:bb:a3:a0:a7:f5:5e:c7:cd:fb:cb:e6:e8:35:34: ab:ed:6a:34:a9:42:77:1d:b6:01:14:4f:21:b5:97:52:02:6d: 0a:b4:b0:66:68:59:1a:17:3c:46:40:da:23:94:60:e5:2e:5b: b8:96:af:d5:de:72:ad:f5:c0:56:bc:dc:37:bd:d4:95:ec:f0: cf:b4:4f:20:e7:b1:0a:06:a1:9d:a5:1a:91:ad:a8:3d:e7:58: 46:04:5c:75:10:e5:45:34:76:04:7c:40:6a:b1:e9:8d:b5:06: 69:d1:bc:f5:0a:c1:89:7e:03:7d:48:ed:be:97:f7:26:05:9f: 5b:82:04:0b:10:6d:6d:28:f8:73:81:d6:a0:0d:f1:df:9f:e2: 24:47:e5:44:e2:1a:09:7a:2f:b3:0c:2a:b4:ca:b6:a6:47:1f: 24:30:80:09:74:ba:4f:74:9a:a3:ef:4a:49:fe:40:06:55:3a: 50:39:35:92:55:dc:94:dd:44:20:08:f6:39:50:90:89:9d:77: 61:42:2a:4a:2f:5a:34:3c:61:7d:6d:71:7e:70:52:13:b0:92: 2d:a5:0e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXZx83qd++JSOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NzVkZTM1NTAtOWYzMi00MmEzLTkxMjctYTA2Mzc2ZDM0NWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiAxsu1Nm9KiBFBtoNQjXc1EZMoNOjPKoKFW sMB0QX8s8K36frMfBTVkkaqrkxZ1DfyF2l0l1Y3kzp45oV7GFaekb4uaF7Os+vwq mGcz3yXOpqSTKpE9hdJfq/JQ6WCgFbzXcMWARCAloIx0RJYdLfSwWuPLlVyC0/TO u6nUt0s3lHk75QjPPJmRAU1zNfDnd/SVZlklXRChBSlmZzmQlL4ZdFS8ee0TlZ7V x5sBoufOCNfEnEF8mCf2WLghd/hLtGwQKkXjO9XrGpbRf9iszCvT0ohmlhEE8Lef BCBjl3dqUCnLNcOnGpZi7txVUtnU/wzyYNVzN7bHGDU28aKrRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN5MwAGaMnW3RSTe5p/5Cayt/8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMTllYWNjNTMtZTRmOC0z YmFmLWIzYjYtODU2NmNhYjI1YjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/Kl17RI5A4fnxCoawg1YkfTkAXgqvWgpnxK4/m6uA884/Uc6nER0G7 o6Cn9V7HzfvL5ug1NKvtajSpQncdtgEUTyG1l1ICbQq0sGZoWRoXPEZA2iOUYOUu W7iWr9Xecq31wFa83De91JXs8M+0TyDnsQoGoZ2lGpGtqD3nWEYEXHUQ5UU0dgR8 QGqx6Y21BmnRvPUKwYl+A31I7b6X9yYFn1uCBAsQbW0o+HOB1qAN8d+f4iRH5UTi Ggl6L7MMKrTKtqZHHyQwgAl0uk90mqPvSkn+QAZVOlA5NZJV3JTdRCAI9jlQkImd d2FCKkovWjQ8YX1tcX5wUhOwki2lDkA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:31 2025 by rpki-client